parent
bd555bb954
commit
849c769a65
@ -0,0 +1,119 @@
|
|||||||
|
# https://docs.pleroma.social/backend/installation/otp_en/
|
||||||
|
---
|
||||||
|
- hosts: pleroma
|
||||||
|
become: yes
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
# arch="$(uname -m)";if [ "$arch" = "x86_64" ];then arch="amd64";elif [ "$arch" = "armv7l" ];then arch="arm";elif [ "$arch" = "aarch64" ];then arch="arm64";else echo "Unsupported arch: $arch">&2;fi;if getconf GNU_LIBC_VERSION>/dev/null;then libc_postfix="";elif [ "$(ldd 2>&1|head -c 9)" = "musl libc" ];then libc_postfix="-musl";elif [ "$(find /lib/libc.musl*|wc -l)" ];then libc_postfix="-musl";else echo "Unsupported libc">&2;fi;echo "$arch$libc_postfix"
|
||||||
|
- shell: |
|
||||||
|
arch="$(uname -m)"
|
||||||
|
if [ "$arch" = "x86_64" ]; then
|
||||||
|
arch="amd64";
|
||||||
|
elif [ "$arch" = "armv7l" ]; then
|
||||||
|
arch="arm";
|
||||||
|
elif [ "$arch" = "aarch64" ]; then
|
||||||
|
arch="arm64";
|
||||||
|
else
|
||||||
|
echo "Unsupported arch: $arch">&2;
|
||||||
|
fi;
|
||||||
|
if getconf GNU_LIBC_VERSION>/dev/null; then
|
||||||
|
libc_postfix="";
|
||||||
|
elif [ "$(ldd 2>&1|head -c 9)" = "musl libc" ]; then
|
||||||
|
libc_postfix="-musl";
|
||||||
|
elif [ "$(find /lib/libc.musl*|wc -l)" ]; then
|
||||||
|
libc_postfix="-musl";
|
||||||
|
else
|
||||||
|
echo "Unsupported libc">&2;
|
||||||
|
fi;
|
||||||
|
echo "$arch$libc_postfix"
|
||||||
|
register: arch_result
|
||||||
|
- set_fact:
|
||||||
|
pleroma_flavour: "{{ arch_result.stdout | trim }}"
|
||||||
|
|
||||||
|
- apt:
|
||||||
|
update_cache: yes
|
||||||
|
|
||||||
|
# apt install curl unzip libncurses5 postgresql postgresql-contrib nginx certbot libmagic-dev
|
||||||
|
# apt install imagemagick ffmpeg libimage-exiftool-perl
|
||||||
|
# apt install postgresql-11-rum
|
||||||
|
- package:
|
||||||
|
name:
|
||||||
|
- curl
|
||||||
|
- unzip
|
||||||
|
- libncurses5
|
||||||
|
- postgresql
|
||||||
|
- postgresql-contrib
|
||||||
|
- nginx
|
||||||
|
- certbot
|
||||||
|
- libmagic-dev
|
||||||
|
- imagemagick
|
||||||
|
- ffmpeg
|
||||||
|
- libimage-exiftool-perl
|
||||||
|
- postgresql-11-rum
|
||||||
|
notify:
|
||||||
|
- Restart postgres
|
||||||
|
|
||||||
|
# Create a Pleroma user
|
||||||
|
# adduser --system --shell /bin/false --home /opt/pleroma pleroma
|
||||||
|
- user:
|
||||||
|
name: pleroma
|
||||||
|
home: /opt/pleroma
|
||||||
|
shell: /bin/false
|
||||||
|
system: yes
|
||||||
|
|
||||||
|
# Clone the release build into a temporary directory and unpack it
|
||||||
|
# su pleroma -s $SHELL -lc "
|
||||||
|
# curl 'https://git.pleroma.social/api/v4/projects/2/jobs/artifacts/stable/download?job=$FLAVOUR' -o /tmp/pleroma.zip
|
||||||
|
# unzip /tmp/pleroma.zip -d /tmp/
|
||||||
|
# "
|
||||||
|
- get_url:
|
||||||
|
url: https://git.pleroma.social/api/v4/projects/2/jobs/artifacts/stable/download?job={{ pleroma_flavour }}
|
||||||
|
dest: /tmp/pleroma.zip
|
||||||
|
- command: unzip /tmp/pleroma.zip -d /tmp/
|
||||||
|
|
||||||
|
# Move the release to the home directory and delete temporary files
|
||||||
|
# su pleroma -s $SHELL -lc "
|
||||||
|
# mv /tmp/release/* /opt/pleroma
|
||||||
|
# rmdir /tmp/release
|
||||||
|
# rm /tmp/pleroma.zip
|
||||||
|
# "
|
||||||
|
- copy:
|
||||||
|
src: /tmp/release/
|
||||||
|
dest: /opt/pleroma/
|
||||||
|
remote_src: yes
|
||||||
|
owner: pleroma
|
||||||
|
- file:
|
||||||
|
path: "{{ item }}"
|
||||||
|
state: absent
|
||||||
|
loop:
|
||||||
|
- /tmp/release
|
||||||
|
- /tmp/pleroma.zip
|
||||||
|
|
||||||
|
# Create uploads directory and set proper permissions (skip if planning to use a remote uploader)
|
||||||
|
# Note: It does not have to be `/var/lib/pleroma/uploads`, the config generator will ask about the upload directory later
|
||||||
|
# mkdir -p /var/lib/pleroma/uploads
|
||||||
|
# chown -R pleroma /var/lib/pleroma
|
||||||
|
|
||||||
|
# Create custom public files directory (custom emojis, frontend bundle overrides, robots.txt, etc.)
|
||||||
|
# Note: It does not have to be `/var/lib/pleroma/static`, the config generator will ask about the custom public files directory later
|
||||||
|
# mkdir -p /var/lib/pleroma/static
|
||||||
|
# chown -R pleroma /var/lib/pleroma
|
||||||
|
|
||||||
|
# Create a config directory
|
||||||
|
# mkdir -p /etc/pleroma
|
||||||
|
# chown -R pleroma /etc/pleroma
|
||||||
|
- file:
|
||||||
|
path: "{{ item }}"
|
||||||
|
state: directory
|
||||||
|
owner: pleroma
|
||||||
|
loop:
|
||||||
|
- /var/lib/pleroma/uploads
|
||||||
|
- /var/lib/pleroma/static
|
||||||
|
- /etc/pleroma
|
||||||
|
|
||||||
|
handlers:
|
||||||
|
- name: Restart postgres
|
||||||
|
service:
|
||||||
|
name: postgresql
|
||||||
|
state: restarted
|
||||||
|
|
||||||
@ -0,0 +1,31 @@
|
|||||||
|
# https://docs.pleroma.social/backend/installation/otp_en/
|
||||||
|
---
|
||||||
|
- hosts: pleroma
|
||||||
|
become: yes
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
# Create the postgres database
|
||||||
|
# su postgres -s $SHELL -lc "psql -f /tmp/setup_db.psql"
|
||||||
|
- command: psql -f /tmp/setup_db.psql
|
||||||
|
become_user: postgres
|
||||||
|
|
||||||
|
# Create the database schema
|
||||||
|
# su pleroma -s $SHELL -lc "./bin/pleroma_ctl migrate"
|
||||||
|
- command: ./bin/pleroma_ctl migrate
|
||||||
|
args:
|
||||||
|
chdir: /opt/pleroma
|
||||||
|
become_user: pleroma
|
||||||
|
|
||||||
|
# If you have installed RUM indexes uncommend and run
|
||||||
|
# su pleroma -s $SHELL -lc "./bin/pleroma_ctl migrate --migrations-path priv/repo/optional_migrations/rum_indexing/"
|
||||||
|
- command: ./bin/pleroma_ctl migrate --migrations-path priv/repo/optional_migrations/rum_indexing/
|
||||||
|
args:
|
||||||
|
chdir: /opt/pleroma
|
||||||
|
become_user: pleroma
|
||||||
|
|
||||||
|
handlers:
|
||||||
|
- name: Restart postgres
|
||||||
|
service:
|
||||||
|
name: postgresql
|
||||||
|
state: restarted
|
||||||
|
|
||||||
@ -0,0 +1,62 @@
|
|||||||
|
# https://docs.pleroma.social/backend/installation/otp_en/
|
||||||
|
---
|
||||||
|
- hosts: pleroma
|
||||||
|
become: yes
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
# cp /opt/pleroma/installation/pleroma.nginx /etc/nginx/sites-available/pleroma.conf
|
||||||
|
# ln -s /etc/nginx/sites-available/pleroma.conf /etc/nginx/sites-enabled/pleroma.conf
|
||||||
|
- copy:
|
||||||
|
src: /opt/pleroma/installation/pleroma.nginx
|
||||||
|
dest: /etc/nginx/sites-available/pleroma.conf
|
||||||
|
remote_src: yes
|
||||||
|
notify: Restart nginx
|
||||||
|
- file:
|
||||||
|
src: /etc/nginx/sites-available/pleroma.conf
|
||||||
|
dest: /etc/nginx/sites-enabled/pleroma.conf
|
||||||
|
state: link
|
||||||
|
notify: Restart nginx
|
||||||
|
|
||||||
|
- replace:
|
||||||
|
path: /etc/nginx/sites-available/pleroma.conf
|
||||||
|
regexp: 'example\.tld'
|
||||||
|
replace: "{{ pleroma_tld }}"
|
||||||
|
notify: Restart nginx
|
||||||
|
|
||||||
|
# Copy the service into a proper directory
|
||||||
|
# cp /opt/pleroma/installation/pleroma.service /etc/systemd/system/pleroma.service
|
||||||
|
- copy:
|
||||||
|
src: /opt/pleroma/installation/pleroma.service
|
||||||
|
dest: /etc/systemd/system/pleroma.service
|
||||||
|
remote_src: yes
|
||||||
|
# Start pleroma and enable it on boot
|
||||||
|
# systemctl start pleroma
|
||||||
|
# systemctl enable pleroma
|
||||||
|
notify: Restart pleroma
|
||||||
|
|
||||||
|
# Create the directory for webroot challenges
|
||||||
|
# mkdir -p /var/lib/letsencrypt
|
||||||
|
- file:
|
||||||
|
path: /var/lib/letsencrypt
|
||||||
|
state: directory
|
||||||
|
|
||||||
|
# Add it to the daily cron
|
||||||
|
# echo '#!/bin/sh
|
||||||
|
# certbot renew --cert-name yourinstance.tld --webroot -w /var/lib/letsencrypt/ --post-hook "systemctl reload nginx"
|
||||||
|
# ' > /etc/cron.daily/renew-pleroma-cert
|
||||||
|
# chmod +x /etc/cron.daily/renew-pleroma-cert
|
||||||
|
- template:
|
||||||
|
src: renew-pleroma-cert
|
||||||
|
dest: /etc/cron.daily/renew-pleroma-cert
|
||||||
|
mode: +x
|
||||||
|
|
||||||
|
handlers:
|
||||||
|
- name: Restart nginx
|
||||||
|
service:
|
||||||
|
name: nginx
|
||||||
|
state: restarted
|
||||||
|
- name: Restart pleroma
|
||||||
|
service:
|
||||||
|
name: pleroma
|
||||||
|
enabled: yes
|
||||||
|
state: restarted
|
||||||
@ -0,0 +1,32 @@
|
|||||||
|
```sh
|
||||||
|
ansible-playbook -l pleroma playbooks/pleroma/01.yml
|
||||||
|
|
||||||
|
su pleroma -s $SHELL -lc "./bin/pleroma_ctl instance gen --output /etc/pleroma/config.exs --output-psql /tmp/setup_db.psql"
|
||||||
|
|
||||||
|
ansible-playbook -l pleroma playbooks/pleroma/02.yml
|
||||||
|
|
||||||
|
# Start the instance to verify that everything is working as expected
|
||||||
|
su pleroma -s $SHELL -lc "./bin/pleroma daemon"
|
||||||
|
|
||||||
|
# Wait for about 20 seconds and query the instance endpoint, if it shows your uri, name and email correctly, you are configured correctly
|
||||||
|
sleep 20 && curl http://localhost:4000/api/v1/instance
|
||||||
|
|
||||||
|
# Stop the instance
|
||||||
|
su pleroma -s $SHELL -lc "./bin/pleroma stop"
|
||||||
|
|
||||||
|
sudo systemctl stop nginx
|
||||||
|
certbot certonly --standalone --preferred-challenges http -d $PLEROMA_TLD
|
||||||
|
|
||||||
|
ansible-playbook -l pleroma playbooks/pleroma/03.yml
|
||||||
|
|
||||||
|
# Uncomment the webroot method
|
||||||
|
sudo vim /etc/nginx/sites-available/pleroma.conf
|
||||||
|
|
||||||
|
sudo nginx -t
|
||||||
|
|
||||||
|
# Restart nginx
|
||||||
|
systemctl restart nginx
|
||||||
|
|
||||||
|
cd /opt/pleroma
|
||||||
|
su pleroma -s $SHELL -lc "./bin/pleroma_ctl user new joeuser joeuser@sld.tld --admin"
|
||||||
|
```
|
||||||
@ -0,0 +1,2 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
certbot renew --cert-name {{ pleroma_tld }} --webroot -w /var/lib/letsencrypt/ --post-hook "systemctl reload nginx"
|
||||||
@ -0,0 +1,20 @@
|
|||||||
|
---
|
||||||
|
- hosts: server
|
||||||
|
tasks:
|
||||||
|
|
||||||
|
- name: create user
|
||||||
|
user:
|
||||||
|
name: alpha
|
||||||
|
# password: "{{ password | password_hash('sha512') }}"
|
||||||
|
|
||||||
|
- name: give user sudo access
|
||||||
|
lineinfile:
|
||||||
|
path: /etc/sudoers.d/alpha
|
||||||
|
line: "alpha ALL=(ALL) NOPASSWD: ALL"
|
||||||
|
create: yes
|
||||||
|
validate: visudo -cf %s
|
||||||
|
|
||||||
|
- name: add ssh keys
|
||||||
|
authorized_key:
|
||||||
|
user: alpha
|
||||||
|
key: https://github.com/kejadlen.keys
|
||||||
Loading…
Reference in new issue